rootninja

There’s a .dll in the Windows 2k3 Resource Kit named acctinfo.dll that’s not registered by default. If you copy this .dll to a machine where you browse AD with ADUC snap-in (Active Directory Users and Computers), and register it, you’ll start seeing several additional attributes that were not queried before like password expiration date, SID, GUID, etc.

regsrv32 acctinfo.dll

and to remove it

regsrv32 /u acctinfo.dll

You can add this in and remove it at any time. It only affects the machine its installed on.